What is Single Sign On (SSO)

Be honest: You have lots of passwords to remember and you "cheat" by using the same one on multiple sites. Or by writing them down. That's a real security risk! In this video, Jeff Crume explains how a much better option, Single-Sign On or SSO, can help you manage a mountain of passwords without compromising security.

[SahadFoundation]

This is so informative. Thank you for making this video.

[shweu]

Wow ..this is awesome .
Sir, i have completed my course on cyber security law ..it's so interesting...hope i will get a job soon so that i can explore and learn more about it and contribute positively to securing the cyber space ..

[davidearthos]

Good work.. we're getting there step by step..

[tiamaria]

Isn't single point of failure more related to availablity. What if the SSO application goes down or is not accessible?

[jamesa]

This was very helpful and well explained. Thank you!

[elijahlair]

Wow! This is so good! Perfectly explained

[megayndx]

Good solution but it has a flaw. It's better for hackers to steal SSO of many users and get access to their services throw attacking single SSO. However all says that SSO is highly protected and blah-blah but it will be cheaper to find vulnerabilities and attack a single service instead of a couple ones. Like it was with lastpass.

[mms]

Isn;t this identity federation? I thought the SSO is the contract between the client (browser) and the IDP so that if different systems use the same identity provider for authentication, they can login without explicitly authenticated.

[YavorMarinov-rtxc]

P1=P2=Pn, and what will make the user not do PA=P1=Pn ..., but PA != P1 != Pn in the SSO case ?

[shirley]

So this is safe then, right.is that when you get google mixed numbers letters.! I have concussion why at hospital. Tts bad dr said.

[CenturionKenshin]

SPoF here is the guy with the smile :) and always will be. SSO makes it easier to get one password to rule it all and MFA would not help, if guy_with_the_smile's butt is on fire :)

[messizhao]

Does anyone watch this video just to learn english like me?

[dmatviychuk]

SPoF is when sso stopped working, not when someone figured user’s password.

[LSM-tex]

Isn't SSO like his third example. The SSO password gets compromised, it will provide access to the rest.

[andregomesdasilva]

I don't considera myself a super smart person, but sometimes I can't understand why people can't figure our some very simple solutions.
Just create a sead with about 6 to 8 characters like j%7&=83. Now, of you need to create an account in Google, take the first 2 and last 2 letters, and glue them to your seed: GOj%7&=83LE. Of you are creating ot in Yahoo, then YAj%7&=83OO.
There. You have virtually one password per website and you just need to remember one thing (the seed). No need for vault, no need for SSO.
Why this is not obvious to everyone is beyond me.

[GuruChaz]

I swear we have a lady that calls in almost every 3-4 days that she has forgot her main Windows login password. How is that even possible? Are people really that stupid?

[dumchikdum]

Password manager solves this, Bitwarden solves this. Wasted my time

[tyrojames]

SSO is NO Longer SAFE! HELL, WHAT IS?🤔🤔